*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Eduardo Barretto 
(ebarretto):

Hi Geeks!

This issues did not exist in kubuntu 22.04


Have power plan "suspend_session=false"
Have the power plan set to "on_lid_close=sleep"   <- no external monitors
Have screen locking set to "lock_auto_mins=15" and 
"lock_after_sleep_wakeup=true"

run "shutdown -P 900"    < any normal number >

Now close the lid, the laptop sleeps and upon wake_+_unlock the shutdown
is cancelled.

If you set the set "on_lid_close=lock_screen" the problem goes away.

Our laptops are LUKS full disk encrypted and are always scheduled to
shutdown. The operator must manually extend time_till_shutdown.  If the
operator fails this task the machine powers off thereby reducing the
surface attack area and side channel attacks at the disk.


Operating System: Kubuntu 24.04
KDE Plasma Version: 5.27.11
KDE Frameworks Version: 5.115.0
Qt Version: 5.15.13
Kernel Version: 6.8.0-40-generic (64-bit)
Graphics Platform: X11
Processors: 8 × 11th Gen Intel® Core™ i5-11300H @ 3.10GHz
Memory: 7.5 GiB of RAM
Graphics Processor: Mesa Intel® Xe Graphics
Manufacturer: Dell Inc.
Product Name: Inspiron 15 5510

ProblemType: Bug
DistroRelease: Ubuntu 24.04
Package: gnome-screensaver (not installed)
ProcVersionSignature: Ubuntu 6.8.0-40.40-generic 6.8.12
Uname: Linux 6.8.0-40-generic x86_64
ApportVersion: 2.28.1-0ubuntu3
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: KDE
Date: Fri Aug  9 19:47:51 2024
InstallationDate: Installed on 2024-08-03 (6 days ago)
InstallationMedia: Kubuntu 24.04 LTS "Noble Numbat" - Release amd64 (20240425.1)
SourcePackage: gnome-screensaver
Symptom: security
Title: Screen locking issue
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: kwin (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug noble
-- 
Screen locking issue
https://bugs.launchpad.net/bugs/2076471
You received this bug notification because you are a member of Ubuntu Bugs, 
which is subscribed to the bug report.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to